T08 · Insecure Dependencies
Warning
- Location
SKILL.md:95- Finding
Unpinned Third-Party Package Installation
- Content
View full analysis
- Remediation
View remediation
Security audit
Smart Meeting Notes
Security checks for vulnerabilities and agentic risk
Overview
This skill does useful meeting summarization, but it automatically stores sensitive meeting notes locally without clear user control.
Review before installing if your meetings may include confidential, HR, legal, customer, or personal information. Use it only if you are comfortable with notes being saved under ~/.openclaw/meetings/, and prefer explicit confirmation before saving, reading history, installing Whisper, or sending audio to an external API.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (2)
T09 · Insecure Skill Coding Practices
Warning
- Location
SKILL.md:74- Finding
Unsanitized Meeting Topic Used in Persistent File Path
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (5)
Description-Behavior Mismatch
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The skill’s declared purpose is meeting summarization, but the instructions expand it into persistent storage, history management, and retrieval of prior notes. That broadens data handling from ephemeral summarization into a local meeting archive containing potentially sensitive business or personal discussions, increasing privacy and unauthorized-access risk beyond what a user may expect.
- Content
Context-Inappropriate Capability
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
The skill includes local filesystem persistence and later retrieval of meeting content without that capability being clearly justified by the manifest purpose alone. Because meeting notes often contain sensitive operational, HR, legal, or personal information, silently writing them to disk and reloading them later creates confidentiality and retention risks.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
The instruction to save all meeting notes to ~/.openclaw/meetings/ introduces persistent storage of potentially sensitive meeting content without any warning, consent prompt, or data minimization guidance. Users may reasonably expect a summary operation, not automatic retention of transcripts, decisions, action items, and quotes on local disk.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
The audio-handling instructions suggest transcribing recordings with Whisper CLI or an external API without any privacy notice or consent guidance. Meeting recordings may contain highly sensitive spoken information, and sending them to external services or even processing them locally can have legal, policy, and confidentiality implications if not clearly disclosed.
- Content
Missing User Warnings
Low
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
The skill directs the agent to load the most recent meeting notes from local storage when asked to follow up, but it does not warn that historical data will be accessed. This can expose prior sensitive meeting content unexpectedly, especially on shared systems or when the user did not realize earlier notes were retained.
- Content